Title: Testing a file carving tool using realistic datasets generated with openness by a user level file system

Authors: Kaparthi Srinivas; Temberveni Venugopal

Addresses: Department of CSE, Sree Chaitanya College of Engineering, LMD Colony, Thimmapur, Karimnagar, Telangana, India ' Department of CSE, JNTUH College of Engineering, Nachupally, Karimnagar. Telangana, India

Abstract: During the development phase of a file carver, it is inappropriate to use a used hard disk as an input medium due to the fact that the file system does not provide openness regarding file fragmentation and location of data on the disk. In this paper, we propose a method that provides realistic datasets with openness which can be used to test carving tools. Realistic property of datasets is achieved by implementing a file system at user level. A large file is used to mimic a hard disk in this process. The large file, on the hard disk, is handled by the host file system. The same large file to mimic as a test hard disk is handled by a file system at user level and hence openness is achieved.

Keywords: metadata; digital forensics; data recovery; data analysis techniques; data analysis strategies; virtual disk; operating system; image file carving; user level file system; ULFS; script file; kernel level file system; realistic datasets; datasets with openness; software testing; data clusters.

DOI: 10.1504/IJDATS.2020.106639

International Journal of Data Analysis Techniques and Strategies, 2020 Vol.12 No.2, pp.155 - 171

Received: 11 Oct 2017
Accepted: 13 May 2018
Published online: 16 Apr 2020 *

Full-text access for editors Full-text access for subscribers Purchase this article Comment on this article